Claw Connector

This skill appears to do what it says, but consider the following before installing: - Relay trust & public-IP disclosure: the default relay is a community host and the skill calls the relay's /myip endpoint; your public IP (nat_hint) is embedded in the shareable address token and visible to the relay operator and any peer you give the token to. If this is a concern, self-host the relay and set DIPLOMAT_RELAY_URL. - Review permissions and docs: the skill reads/writes workspace files (MEMORY.md, ledger.json, peers.json) and writes alerts/flags for hooks. The README and IMPLEMENTATION.md are explicit about this; make sure you are comfortable with the skill writing commitment entries to MEMORY.md. - Verify sources: the package metadata refers to a GitHub repo (techtanush/claw-diplomat). If provenance matters, inspect that repository or the included code locally before running it. - Python deps: the skill requires PyPI packages. Installing them with pip is normal, but if you want extra assurance, inspect versions and install in a virtualenv. - Listener & cron: listener.py is a long-running process the user or agent must start; cron_deadline_check.py is optional and must be added to crontab to run periodically. These require you to opt into background activity — they are not auto-spawned by hooks. - Minimal extra surface: the manifest lists reading files like SOUL.md and AGENTS.md although handlers mostly use MEMORY.md and peers.json; consider auditing the code (negotiate.py, listener.py, hooks) if you want to be certain only intended files are accessed. Overall: acceptable if you trust the relay or self-host it, and if you review/approve the included code and Python dependencies before running.